Exercises

Exercise Avg. Time Difficulty Solved by Tier
CVE-2025-XX149
This challenge covers the review of a CVE in a Python codebase and its patch
< 1 Hr. hard 193 PRO
CVE-2025-6XX4
This challenge covers the review of a CVE published in 2025 in a go codebase and its patch
< 1 Hr. hard 91 PRO
CVE-2025-5X3X9
This challenge covers the review of a CVE discovered in 2025 in a golang codebase and its patch
< 1 Hr. hard 110 PRO
CVE-2024-47081 < 1 Hr. medium 34 PRO
CVE-2024-433XX
This challenge covers the review of a CVE in a Python codebase and its patch
< 1 Hr. hard 197 PRO
CVE-2023-3219X
This challenge covers the review of a CVE in a Golang project and its patch
< 1 Hr. hard 110 PRO
CVE-2025-4913X
This challenge covers the review of a CVE in a Go codebase and its patch. The goal is to review the code to find the security issue.
< 1 Hr. hard 104 PRO
CVE-2024-419XX
This challenge covers the review of a CVE in a Python codebase and its patch
< 1 Hr. hard 253 PRO
CVE-2025-3X5X
This challenge covers the review of a CVE in a Golang project
< 1 Hr. hard 91 PRO
SAML: CVE-2025-25291
This exercise covers the exploitation of CVE-2025-25291 (impacting ruby-saml)
2-4 Hr. hard 28 PRO
SAML: CVE-2025-29775 Signed Metadata
This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto) without XMLResponse
2-4 Hr. hard 23 PRO
CVE-2025-XX95X
This challenge is part of our go code review challenges designed to teach you security code review by reviewing patches
< 1 Hr. hard 118 PRO
CVE-2019-X03X
This challenge covers the review of a CVE in a golang codebase and its patch
< 1 Hr. hard 115 PRO
CVE-2019-379X
This challenge is part of our golang code review challenges designed to teach you security code review by reviewing patches
< 1 Hr. hard 173 PRO
CVE-2024-6X3X
This challenge covers the review of a CVE (original vulnerable code and diff) of a real go codebase
< 1 Hr. hard 109 PRO
SAML: CVE-2025-29775
This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto)
1-2 Hr. hard 31 PRO
CVE-2022-37X1
This challenge covers the review of a CVE in a go codebase and its patch
< 1 Hr. hard 128 PRO
CVE-2023-XX463
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 122 PRO
CVE-2024-X5X87
This challenge covers the review of a CVE in a go codebase and its patch
< 1 Hr. hard 126 PRO
CVE-2022-XX975
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 131 PRO
CVE-2024-X90X6
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 156 PRO
CVE-2022-X10X8
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 174 PRO
CVE-2022-2X8XX
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 193 PRO
CVE-2024-2791X
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 142 PRO
CVE-2023-51XX2
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 158 PRO
CVE-2022-X87X
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 150 PRO
CVE-2024-X3X06
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 141 PRO
CVE-2023-X5821
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 135 PRO
CVE-2022-4x3x5
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. hard 215 PRO
CVE-2023-3X4X6
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. hard 252 PRO
‹ 1 2 3 4 5 6 … 7 ›
Showing 61–90 of 193 exercises